NAB Transact WooCommerce Plugin 2.1.0 on Wordpress privilege escalation (CVE-2020-11497)
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical was found in NAB Transact WooCommerce Plugin 2.1.0 on Wordpress (E-Commerce Management Software). Affected by this vulnerability is some unknown functionality. Upgrading to version 2.1.2 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Level: 5.5
Ericom Access Server 9.2.0 Server-Side Request Forgery (CVE-2020-24548)
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Ericom Access Server 9.2.0. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Rapid7 Metasploit Framework telpho10_credential_dump untar directory traversal (CVE-2020-7377)
Summary: A vulnerability was found in Rapid7 Metasploit Framework (version unknown). It has been classified as critical. Affected is the function untar of the component telpho10_credential_dump. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Rapid7 Metasploit Framework (version unknown). It has been classified as critical. Affected is the function untar of the component telpho10_credential_dump. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
openSIS Community Edition 7.3 index.php USERNAME sql injection (CVE-2020-6637)
Summary: A vulnerability has been found in openSIS Community Edition 7.3 and classified as critical. This vulnerability affects some unknown processing of the file index.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability has been found in openSIS Community Edition 7.3 and classified as critical. This vulnerability affects some unknown processing of the file index.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Rapid7 Metasploit Framework telpho10_credential_dump untar directory traversal (CVE-2020-7377)
Summary: A vulnerability was found in Rapid7 Metasploit Framework (version unknown). It has been classified as critical. Affected is the function untar of the component telpho10_credential_dump. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in Rapid7 Metasploit Framework (version unknown). It has been classified as critical. Affected is the function untar of the component telpho10_credential_dump. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
openSIS Community Edition 7.3 index.php USERNAME sql injection (CVE-2020-6637)
Summary: A vulnerability has been found in openSIS Community Edition 7.3 and classified as critical. This vulnerability affects some unknown processing of the file index.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability has been found in openSIS Community Edition 7.3 and classified as critical. This vulnerability affects some unknown processing of the file index.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Ansible Engine up to 2.7.15/2.8.7/2.9.2 solaris_zone command injection (CVE-2019-14904)
Summary: A vulnerability was found in Ansible Engine up to 2.7.15/2.8.7/2.9.2 and classified as critical. This issue affects an unknown code block of the component solaris_zone. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability was found in Ansible Engine up to 2.7.15/2.8.7/2.9.2 and classified as critical. This issue affects an unknown code block of the component solaris_zone. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Oracle NetSuite prior 2020.1.4 SuiteCommerce Advanced privilege escalation (CVE-2020-14729)
Summary: A vulnerability has been found in Oracle NetSuite and classified as critical. Affected by this vulnerability is an unknown functionality of the component SuiteCommerce Advanced. Upgrading to version 2020.1.4 eliminates this vulnerability.
Level: 4.6
Summary: A vulnerability has been found in Oracle NetSuite and classified as critical. Affected by this vulnerability is an unknown functionality of the component SuiteCommerce Advanced. Upgrading to version 2020.1.4 eliminates this vulnerability.
Level: 4.6
F5 BIG-IP/BIG-IP Virtual Edition Session Initiation Protocol SIP Message memory corruption (CVE-2020-5926)
Summary: A vulnerability classified as critical has been found in F5 BIG-IP and BIG-IP Virtual Edition (Firewall Software) (the affected version unknown). This affects an unknown code of the component Session Initiation Protocol. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability classified as critical has been found in F5 BIG-IP and BIG-IP Virtual Edition (Firewall Software) (the affected version unknown). This affects an unknown code of the component Session Initiation Protocol. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Trend Micro Micro Deep Security/Vulnerability Protection Management Console Remote Code Execution (CVE-2020-8602)
Summary: A vulnerability, which was classified as critical, has been found in Trend Micro Micro Deep Security and Vulnerability Protection (unknown version). This issue affects an unknown code of the component Management Console. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, has been found in Trend Micro Micro Deep Security and Vulnerability Protection (unknown version). This issue affects an unknown code of the component Management Console. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Dell EMC Isilon OneFS/EMC PowerScale OneFS Likewise memory corruption (CVE-2020-5383)
Summary: A vulnerability classified as critical was found in Dell EMC Isilon OneFS and EMC PowerScale OneFS (the affected version is unknown). This vulnerability affects an unknown part of the component Likewise. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Summary: A vulnerability classified as critical was found in Dell EMC Isilon OneFS and EMC PowerScale OneFS (the affected version is unknown). This vulnerability affects an unknown part of the component Likewise. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Netflix Spinnaker up to 8.6.x Server-Side Request Forgery (CVE-2020-9298)
Summary: A vulnerability classified as critical has been found in Netflix Spinnaker up to 8.6.x. This affects some unknown processing. Upgrading to version 8.7.0 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in Netflix Spinnaker up to 8.6.x. This affects some unknown processing. Upgrading to version 8.7.0 eliminates this vulnerability.
Level: 5.5
Red Lion N-Tron 702-W/N-Tron 702M12-W privilege escalation (CVE-2017-16544)
Summary: A vulnerability was found in Red Lion N-Tron 702-W and N-Tron 702M12-W (affected version not known). It has been rated as critical. Affected by this issue is some unknown functionality. Addressing this vulnerability is possible by firewalling .
Level: 8.8
Summary: A vulnerability was found in Red Lion N-Tron 702-W and N-Tron 702M12-W (affected version not known). It has been rated as critical. Affected by this issue is some unknown functionality. Addressing this vulnerability is possible by firewalling .
Level: 8.8
bl up to 2.2.0/3.0.0/4.0.2 consume() Argument Uninitialized Memory memory corruption (CVE-2020-8244)
Summary: A vulnerability was found in bl up to 2.2.0/3.0.0/4.0.2. It has been declared as critical. This vulnerability affects the function consume(). Upgrading to version 2.2.1, 3.0.1 or 4.0.3 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability was found in bl up to 2.2.0/3.0.0/4.0.2. It has been declared as critical. This vulnerability affects the function consume(). Upgrading to version 2.2.1, 3.0.1 or 4.0.3 eliminates this vulnerability.
Level: 5.5
u-root tarutil directory traversal (CVE-2020-7669)
Summary: A vulnerability classified as critical has been found in u-root (version unknown). Affected is an unknown code block of the component tarutil. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
Summary: A vulnerability classified as critical has been found in u-root (version unknown). Affected is an unknown code block of the component tarutil. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 7.3
OS4Ed openSIS 7.3 MassDropModal.php id sql injection (CVE-2020-6134)
Summary: A vulnerability was found in OS4Ed openSIS 7.3. It has been classified as critical. This affects some unknown functionality of the file MassDropModal.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability was found in OS4Ed openSIS 7.3. It has been classified as critical. This affects some unknown functionality of the file MassDropModal.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Trend Micro OfficeScan XG SP1 on Windows Hard Link Remote Code Execution (CVE-2020-24556)
Summary: A vulnerability, which was classified as critical, was found in Trend Micro OfficeScan XG SP1 on Windows. Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
Summary: A vulnerability, which was classified as critical, was found in Trend Micro OfficeScan XG SP1 on Windows. Affected is an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 6.3
D-Link DCS-2530L/DCS-2670L cgi-bin/ddns_enc.cgi command injection (CVE-2020-25079)
Summary: A vulnerability has been found in D-Link DCS-2530L and DCS-2670L (the affected version is unknown) and classified as critical. This vulnerability affects an unknown function of the file cgi-bin/ddns_enc.cgi. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
Summary: A vulnerability has been found in D-Link DCS-2530L and DCS-2670L (the affected version is unknown) and classified as critical. This vulnerability affects an unknown function of the file cgi-bin/ddns_enc.cgi. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Level: 5.5
KDE ark up to 20.08.0 TAR Archive Symlink privilege escalation (CVE-2020-24654)
Summary: A vulnerability classified as critical has been found in KDE ark up to 20.08.0. Affected is an unknown part. Upgrading to version 20.08.1 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability classified as critical has been found in KDE ark up to 20.08.0. Affected is an unknown part. Upgrading to version 20.08.1 eliminates this vulnerability.
Level: 5.5
Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 privilege escalation (CVE-2020-8576)
Summary: A vulnerability has been found in Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 and classified as critical. This vulnerability affects an unknown code. Upgrading to version 9.3P19, 9.5P14, 9.6P9 or 9.7 eliminates this vulnerability.
Level: 5.5
Summary: A vulnerability has been found in Clustered Data ONTAP up to 9.3P18/9.5P13/9.6P8 and classified as critical. This vulnerability affects an unknown code. Upgrading to version 9.3P19, 9.5P14, 9.6P9 or 9.7 eliminates this vulnerability.
Level: 5.5
grunt Package up to 1.2.x load() Remote Code Execution (CVE-2020-7729)
Summary: A vulnerability was found in grunt Package up to 1.2.x. It has been classified as critical. This affects the function load(). Upgrading to version 1.3.0 eliminates this vulnerability.
Level: 4.6
Summary: A vulnerability was found in grunt Package up to 1.2.x. It has been classified as critical. This affects the function load(). Upgrading to version 1.3.0 eliminates this vulnerability.
Level: 4.6